All MIBs › CISCO-UNIFIED-FIREWALL-MIB › cufwL2GlobalEnableArpInspection
cufwL2GlobalEnableArpInspection
Module: CISCO-UNIFIED-FIREWALL-MIB
OID (symbolic): CISCO-UNIFIED-FIREWALL-MIB::cufwL2GlobalEnableArpInspection
OID (numeric): 1.3.6.1.4.1.9.9.491.1.6.1.3
Node type: OBJECT-TYPE
Type: TruthValue
Access: read-write
Description: The value indicates if ARP inspection, which is a security feature, is enabled globally on the managed firewall.
What is cufwL2GlobalEnableArpInspection?
This read-write TruthValue indicates whether the ARP inspection security feature is enabled globally on the managed firewall. An admin toggles this to control whether the device actively validates ARP traffic to detect spoofing or man-in-the-middle attempts. Enabling this on a transparent-mode firewall would let an admin start catching the spoofed ARP responses that cufwL2GlobalNumSpoofedArpResps is designed to count.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.9.491.1.6.1.3 snmpwalk -v2c -c public <target> CISCO-UNIFIED-FIREWALL-MIB::cufwL2GlobalEnableArpInspection
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.9.9.491.1.6.1.3.1 snmpget -v2c -c public <target> CISCO-UNIFIED-FIREWALL-MIB::cufwL2GlobalEnableArpInspection.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.9.9.491.1.6.1.3.1 s <value>
SNMPv3 example:
snmpget -v3 -l authPriv -u snmpv3-user -a SHA -A "AuthPassword1" -x AES -X "PrivPassword1" <target> cufwL2GlobalEnableArpInspection.1
Start monitoring Cisco ASA firewalls / IOS zone-based firewall devices with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCO-UNIFIED-FIREWALL-MIB::cufwL2GlobalEnableArpInspection OID value, configure state conditions and alerts, and monitor any Cisco ASA firewalls / IOS zone-based firewall devices from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.9 | ciscoMgmt | CISCO-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.9.491 | ciscoUnifiedFirewallMIB | CISCO-UNIFIED-FIREWALL-MIB |
| 1.3.6.1.4.1.9.9.491.1 | ciscoUnifiedFirewallMIBObjects | CISCO-UNIFIED-FIREWALL-MIB |
| 1.3.6.1.4.1.9.9.491.1.6 | cuFwL2FwGrp | CISCO-UNIFIED-FIREWALL-MIB |
| 1.3.6.1.4.1.9.9.491.1.6.1 | cufwL2FwGlobals | CISCO-UNIFIED-FIREWALL-MIB |
| 1.3.6.1.4.1.9.9.491.1.6.1.3 | cufwL2GlobalEnableArpInspection | CISCO-UNIFIED-FIREWALL-MIB |